Jan 13, 2021, 12:00 – 3:00 AM (UTC)
How do you defend your network using a blacklist when the data is constantly changing? Fuzzy logic can identify near-matches for field values by calculating a string similarity score using algorithms like Levenshtein. This can be done in Splunk with the help of a FREE app. Come learn all about Fuzzylookup with legendary Splunk User J.R. Murray!
How do you defend your network using a blacklist when the data is constantly changing? Adversaries can easily obscure data with small changes and blacklisting is suddenly useless... until now. Fuzzy logic can identify near-matches for field values by calculating a string similarity score using algorithms like Levenshtein. Now your blacklist for entry for johnny123@badactor.ru could match similar values like john123@badactor.ru or johnny000@badactor.ru. Join us to take a deep dive into the app that makes this possible on a larger scale, Fuzzylookup.
deductiv
Managing Principle
Wednesday, January 13, 2021
12:00 AM – 3:00 AM (UTC)
| 12:00 AM | Soft Start |
| 12:30 AM | Hard Start |
| 1:30 AM | QandA |
| 2:00 AM | Free Time |
Contact Us
